Skip to content
OpenAdvisories

Archive

5 May 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-32699 Public exploit

    FacturaScripts unauthorized modification of immutable nick field via EditUser controller

    FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser controller. Although the user interface prevents editing this field…

  • Medium 6.1
    CVE-2026-23631 Public exploit

    redis-server Lua use-after-free may allow remote code execution

    Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or c…